Wireless Access

Reply
Contributor I
Posts: 81
Registered: ‎03-18-2013

Does anyone use AirPcap to capture packets on the WIFI side using Wireshark?

I can see the management frames and radio.tap info but I can't see DHCp request packet etc. like you would on a wired trace. Is there something I need to setup in wireshark to do this?

Guru Elite
Posts: 8,335
Registered: ‎09-08-2010

Re: Does anyone use AirPcap to capture packets on the WIFI side using Wireshark?

You would need to do a capture at the controller after decryption to see this.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 1,418
Registered: ‎10-25-2011

Re: Does anyone use AirPcap to capture packets on the WIFI side using Wireshark?

Start here

http://community.arubanetworks.com/t5/forums/searchpage/tab/tkb?location=community%3Aaruba&q=packet+capture

 

There are a few articles that will help you out here.

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: Does anyone use AirPcap to capture packets on the WIFI side using Wireshark?

If the client is connecting used a PSK then you can enter the key and SSID into wireshark. If you can then capture the initial exchange of the client connecting to the wireless you will be able to see the decrypted traffic.

Search Airheads
Showing results for 
Search instead for 
Did you mean: